Tony Cole

Level 27
Hi

I just wondered if anyone here had an idea of the best application control setting for kaspersky that offers the best protection?

Tony :)
 

jamescv7

Level 61
Trusted
Verified
Hardening privilege control mode
Most of the widely used programs are automatically placed in the Trusted category, because they either have a digital signature of the manufacturer, or are included in the KSN Allow list. This allows toughening the restrictions for the other programs: they can be automatically moved in the High Restricted orUntrusted category. In the latter case, KES will automatically block the start of unknown programs that have no digital signature and for which there are no allowing rules within the policy. If a program necessary for work is blocked, you can configure an exclusion for it.
http://support.kaspersky.com/learning/courses/kl_102.98/chapter3.1/section2

Set to untrusted for any unsigned application instead of heuristics analyzer by default that chances are going to low restricted or high restricted which sometimes can execute the program in all matters.
 

jamescv7

Level 61
Trusted
Verified
They have different function, Application control is design to provide policy on which programs allowed to run and access critical operation; therefore changes on the system happens.

Unlike Comodo's Sandbox, it isolates the application already and can undo changes.
 
  • Like
Reactions: Tony Cole

Tony Cole

Level 27
Ah so it limits the programs ability to affect certain critical system areas? Does that mean Comodo's sandbox is more powerful?
 

Nico@FMA

Level 27
As Jamescv7 already mentioned Kaspersky application control is very powerful indeed, but even more important it also works really really well.
Obviously you need some skill and knowledge to understand how it works, but ones you got the hang of it you will see that it does offer a additional layers that traditional sandbox systems like the one in Comodo is unable to match.
Also its not the KAC alone that is really powerful it is the whole Kaspersky suit that works as one unit to give the AC system its balls.
And for that i give Kaspersky kudo's as they are one of the very few brands that have a true working application control rather then some sandbox hybrid idea.

Cheers
 
  • Like
Reactions: Tony Cole